{"investigation":{"slug":"astroport","entity_name":"Astroport","trust_score":46,"severity_base":null,"score_modifier":13,"confidence":0.72,"status":"draft","content_type":"investigation","summary":"Astroport is a decentralized exchange (DEX) and automated market maker (AMM) protocol originally launched on the Terra blockchain in December 2021 and subsequently rebuilt across multiple Cosmos ecosystem chains after Terra's collapse in May 2022. On July 30, 2024, the protocol suffered a significant security exploit on the Terra (Phoenix) chain resulting in approximately $6.4 million in losses due to a reentrancy vulnerability in IBC hooks that had been patched in April 2024 but accidentally reintroduced in a June 2024 upgrade. The protocol itself was the victim of this exploit; partial recovery was achieved by seizing attacker funds on Neutron and blacklisting addresses on Terra, though a portion of stolen assets reached Ethereum and remain unrecovered.","sections":[{"content":"Astroport is a permissionless, decentralized automated market maker (AMM) originally built on the Terra blockchain. It was developed through a joint venture involving Delphi Labs, We3, Attic Lab, and Terraform Labs, with Delphi Digital's research arm, Delphi Labs, serving as the primary incubator. The protocol launched on Terra Classic in December 2021 and quickly became the largest DEX on Terra by total value locked (TVL), at one point holding over $1.8 billion in assets. Astroport supports multiple pool types including constant product, stableswap, and passive concentrated liquidity pools, and uses a dual-token governance model centered on the ASTRO token and its staked variant xASTRO. Following Terra's collapse in May 2022, the protocol rebuilt and migrated to a multi-chain 'outpost' model deployed across Cosmos ecosystem chains including Neutron (primary governance hub), Terra (rebuilt Phoenix chain), Sei, and Injective. In April 2024, governance and staking migrated from Terra to Neutron following a community vote. An Astroport Foundation was subsequently established to provide independent operational continuity. As of mid-2026, the ASTRO token trades at a small fraction of its all-time high of approximately $0.35 (January 2024), with market capitalization estimated below $200,000.","heading":"Protocol Overview","sources":[{"url":"https://blog.astroport.fi/post/astroport-litepaper","name":"Astroport Litepaper - official blog","type":"official","credibility":1},{"url":"https://medium.com/@Neutron.org/the-next-chapter-astroports-migration-to-neutron-7a5e2dbd4b37","name":"Astroport Migration to Neutron - Neutron Medium","type":"news_article","credibility":2},{"url":"https://blog.astroport.fi/post/astroport-contributors-establish-foundation-to-power-new-protocol-development","name":"Astroport contributors establish foundation - official blog","type":"official","credibility":1},{"url":"https://www.coingecko.com/en/coins/astroport-fi","name":"Astroport price today - CoinGecko","type":"other","credibility":2}],"severity":"low"},{"content":"On July 30, 2024, Astroport's deployment on the Terra (Phoenix) chain suffered a reentrancy exploit that resulted in losses of approximately $6.4 million. The stolen assets comprised approximately 60 million ASTRO tokens, 3.5 million USDC, 500,000 USDT, and 2.7 BTC. This exploit was the result of a vulnerability in the IBC (Inter-Blockchain Communication) hooks module — specifically, a flaw in the timeout callback of the ibc-hooks library that allowed recursive execution of the MsgTimeout function before packet commitments were deleted, enabling attackers to create tokens without valid backing. Critically, the same vulnerability class had been identified and patched across Cosmos chains in April 2024. The vulnerability was accidentally reintroduced when Terra conducted an upgrade in June 2024 that incorporated an outdated version (7.3.x fork) of the ibc-go library that lacked the April security fix. Astroport and the Terra chain were the victims of the exploit, not its perpetrators. Terra validators halted the blockchain approximately 3.5 hours after detection to prevent further losses. Recovery actions included: freezing the attacker's Terra wallet address (terra1wrve5z5vsmrgy6ldcveq93aldr6wk3qmxavs4j), seizing approximately 33 million ASTRO tokens that the attacker had bridged to Neutron via a TokenFactory Force Transfer (held in Astroport Treasury), and blacklisting the attacker's addresses on Terra. Approximately 13 million ASTRO tokens were swapped to stablecoins and bridged to Ethereum (attacker Ethereum address: 0xBDe173c4C2249d3a98cD6ed844a4421728114F5A), where they remain unrecovered. The IBC hook vulnerability was subsequently patched. Subsequent DCA buybacks reduced the unbacked ASTRO difference, though as of reporting it had not been fully eliminated. Some commentators, including Cosmos ecosystem figure Jacob Gadikian, had reportedly warned of IBC hook risks prior to the incident.","heading":"July 2024 Security Exploit (Suffered)","sources":[{"url":"https://www.quillaudits.com/blog/hack-analysis/astroport-hack","name":"Astroport Hack Analysis - QuillAudits","type":"research","credibility":2},{"url":"https://rekt.news/astroport-rekt","name":"Astroport - Rekt","type":"news_article","credibility":2},{"url":"https://www.cointrust.com/market-news/terra-blockchain-halted-after-4-million-hack-exposes-vulnerability","name":"Terra Blockchain Halted After Hack - CoinTrust","type":"news_article","credibility":2},{"url":"https://www.bitcoininsider.org/article/255132/astro-token-crashes-60-after-terra-blockchain-exploit","name":"ASTRO token crashes 60% after Terra blockchain exploit - Bitcoin Insider","type":"news_article","credibility":2},{"url":"https://cointelegraph.com/news/terra-blockchain-halt-astro-token-drop","name":"Terra chain halts operations, ASTRO token falls over 60% - CoinTelegraph","type":"news_article","credibility":1},{"url":"https://medium.com/coinmonks/d%C3%A9j%C3%A0-vu-how-a-previously-patched-vulnerability-led-to-astroports-6-4m-exploit-6674e86cae88","name":"Deja Vu: Previously Patched Vulnerability Led to Astroport's $6.4M Exploit - Coinmonks","type":"research","credibility":2},{"url":"https://www.quadrigainitiative.com/hackfraudscam/terramoneyibchookreentrancyvulnerability.php","name":"Terra Money IBC Hook Reentrancy Vulnerability - Quadriga Initiative","type":"community_report","credibility":3},{"url":"https://x.com/astroport_fi/status/1818663685704892511","name":"Astroport official X post on recovery actions","type":"social_media","credibility":2}],"severity":"high"},{"content":"Astroport's original deployment was deeply embedded in the Terra/LUNA ecosystem, which experienced a catastrophic collapse in May 2022 when the UST algorithmic stablecoin depegged and LUNA's value fell to near zero. At the time of the collapse, Astroport was Terra's largest DEX by TVL. The protocol subsequently rebuilt and relaunched on Terra 2.0 and expanded to other Cosmos chains. Although Astroport was not implicated in causing the Terra collapse, its initial reliance on a single ecosystem that failed exposed users and liquidity providers to substantial losses. Astroport's post-collapse pivot to a multi-chain model is documented in its official communications. The SEC's June 2024 settlement with Terraform Labs and Do Kwon — in which TFL agreed to pay over $4.5 billion following a jury fraud verdict — is relevant context: TFL's reduced capacity following that action has been cited as a factor in why a known vulnerability went unpatched on the Terra chain prior to the July 2024 exploit. Terraform Labs had also withdrawn $23.8 million in liquidity from platforms including Astroport in April 2024 in response to the SEC proceedings.","heading":"Terra Ecosystem Collapse and Protocol Exposure (2022)","sources":[{"url":"https://astroport.medium.com/astroport-terra-2-0-a-new-path-forward-b7b328171e4b","name":"Astroport + Terra 2.0: A New Path Forward - Astroport Medium","type":"official","credibility":1},{"url":"https://www.sec.gov/newsroom/press-releases/2024-73","name":"SEC: Terraform and Kwon to Pay $4.5 Billion - SEC.gov","type":"regulatory","credibility":1},{"url":"https://cryptoslate.com/terraform-labs-to-restrict-us-access-withdraw-23-million-of-liquidity-following-sec-ruling/","name":"Terraform Labs to restrict US access, withdraw $23M liquidity - CryptoSlate","type":"news_article","credibility":2}],"severity":"medium"},{"content":"In or around May 2022, a fake application called 'Astroport Swap' appeared in the Google Play Store impersonating the official Astroport product. The Astroport team confirmed they had never deployed tools for mobile devices. The fake application displayed the Astroport user interface and was likely designed to steal funds and private keys from Terra ecosystem users. This represents third-party abuse rather than any action by the Astroport team. The application was not created or sanctioned by Astroport's developers. Users should exercise caution with any purported Astroport mobile application.","heading":"Third-Party Impersonation and Phishing","sources":[{"url":"https://coin-signal.com/cryptonews/a-fake-astroport-defi-application-has-appeared-in-the-terra-ecosystem/","name":"Fake Astroport DeFi application appeared in Terra ecosystem - Coin-Signal","type":"news_article","credibility":3}],"severity":"medium"},{"content":"Astroport's smart contracts have been audited by multiple security firms. Oak Security conducted audits of the core Astroport v1.0 contracts (January 2022), LP Token Balance Tracking (April 2023), and Astroport Incentives (January 2024). Halborn audited the AMM Protocol CosmWasm contracts and the Astral Assembly governance contracts. The July 2024 exploit did not result from a flaw in Astroport's own audited contracts but from a vulnerability in the underlying Terra chain infrastructure (ibc-go library), reintroduced via a Terra-level upgrade. Smart contract audits do not eliminate all risk, particularly from infrastructure-layer vulnerabilities in IBC tooling or chain-level upgrades made by third parties.","heading":"Security Audits","sources":[{"url":"https://docs.astroport.fi/docs/overview/security/audits","name":"Astroport Audits Documentation","type":"official","credibility":1},{"url":"https://github.com/oak-security/audit-reports/blob/master/Astroport/2022-01-20%20Audit%20Report%20-%20Astroport%20v1.0.pdf","name":"Oak Security Audit Reports - Astroport","type":"research","credibility":1},{"url":"https://www.halborn.com/audits/astroport-fi","name":"Halborn Astroport.fi Audit Reports","type":"research","credibility":1}],"severity":"low"},{"content":"Astroport operates under on-chain governance via ASTRO token holders and uses a vxASTRO (voting escrowed ASTRO) model on Neutron, which was the primary governance hub as of mid-2024. Governance migrated from Terra to Neutron in April 2024 following a community vote in October 2023. The Neutron DAO received a donation of 5% of the ASTRO supply as part of cross-community alignment, and Astroport's Protocol Foundation received a reciprocal NTRN donation. An independent Astroport Foundation was established to provide operational continuity, funded in part by a multi-million-dollar ASTRO gift from Delphi Labs. The protocol's multi-chain outpost model gives each deployment independent governance and AMM logic while anchoring governance to Neutron. The token supply allocation reserves 16% for the Astral Assembly (protocol treasury) and uses 0.1% of constant product pool fees for ASTRO buybacks.","heading":"Governance and Decentralization","sources":[{"url":"https://blog.astroport.fi/post/astro-re-port-7-astroport-to-migrate-governance-and-staking-to-neutron-and-launch-vxastro-all-time-volume-records-pcl-deployments-and-more","name":"Astroport Migration to Neutron - official blog","type":"official","credibility":1},{"url":"https://forum.neutron.org/t/approved-proposal-13-establish-strategic-collaboration-with-astroport-via-mutual-token-grants/182","name":"Neutron Proposal #13 - Strategic Collaboration with Astroport","type":"official","credibility":1},{"url":"https://docs.astroport.fi/docs/learn/astro-tokenomics/allocation","name":"Astroport ASTRO token allocation - official docs","type":"official","credibility":1}],"severity":"low"},{"content":"ASTRO reached an all-time high of approximately $0.35 in January 2024. Following the July 2024 exploit on the Terra chain, the token fell approximately 56-60% within hours of the incident, as reported by CoinTelegraph and CoinGecko data. As of mid-2026, ASTRO trades at approximately $0.0002-0.0004 USD, representing a decline of over 99% from its all-time high. Market capitalization is estimated below $200,000, with very limited trading volume (under $5,000 per 24-hour period according to CoinMarketCap). The 2022 Terra collapse, the 2024 exploit, and the associated ASTRO dilution from unauthorized minting are the primary drivers of the token's decline. Partial remediation of the token supply imbalance — via buybacks and seizure of attacker tokens — has been undertaken but was not fully resolved as of available reporting.","heading":"Token Performance and Market Status","sources":[{"url":"https://www.coingecko.com/en/coins/astroport-fi","name":"Astroport price today - CoinGecko","type":"other","credibility":2},{"url":"https://cointelegraph.com/news/terra-blockchain-halt-astro-token-drop","name":"Terra chain halts operations, ASTRO token falls over 60% - CoinTelegraph","type":"news_article","credibility":1},{"url":"https://blog.astroport.fi/post/astro-airdrop-update-and-resolution","name":"ASTRO airdrop update and resolution - Astroport Blog","type":"official","credibility":1}],"severity":"high"}],"timeline":[{"date":"2021-12","event":"Astroport launches on Terra Classic as the primary DEX for the Terra/LUNA ecosystem, reaching over $1.8 billion in TVL.","source":"Astroport Blog / CryptoSlate","source_url":"https://cryptoslate.com/all-you-should-know-about-astroport-amm-built-to-become-terra-ecosystems-defi-liquidity-hub/","date_original":"2021-12-01"},{"date":"2022-05","event":"Terra/LUNA ecosystem collapses. UST depegs and LUNA collapses to near zero. Astroport users suffer liquidity losses tied to the Terra ecosystem failure.","source":"Astroport Medium","source_url":"https://astroport.medium.com/astroport-terra-2-0-a-new-path-forward-b7b328171e4b","date_original":"2022-05-01"},{"date":"2022-05","event":"A fake 'Astroport Swap' mobile application appears on Google Play Store impersonating Astroport, designed to steal user funds and private keys. Astroport confirms no official mobile app exists.","source":"Coin-Signal","source_url":"https://coin-signal.com/cryptonews/a-fake-astroport-defi-application-has-appeared-in-the-terra-ecosystem/","date_original":"2022-05-01"},{"date":"2022-06-04","event":"Astroport relaunches on Terra 2.0 (Phoenix chain) following the Terra Classic collapse.","source":"Astroport Medium","source_url":"https://astroport.medium.com/astroport-is-live-on-terra-2-0-932bb214a6b8"},{"date":"2023-10-08","event":"Astroport stakers vote to migrate protocol governance and staking hub from Terra to Neutron.","source":"Astroport Blog","source_url":"https://blog.astroport.fi/post/astro-re-port-7-astroport-to-migrate-governance-and-staking-to-neutron-and-launch-vxastro-all-time-volume-records-pcl-deployments-and-more"},{"date":"2024-01-11","event":"ASTRO token reaches its all-time high of approximately $0.35 USD.","source":"CoinGecko","source_url":"https://www.coingecko.com/en/coins/astroport-fi"},{"date":"2024-04","event":"A reentrancy vulnerability in the IBC hooks ibc-go library is identified and patched across Cosmos chains.","source":"QuillAudits Hack Analysis","source_url":"https://www.quillaudits.com/blog/hack-analysis/astroport-hack","date_original":"2024-04-01"},{"date":"2024-04-12","event":"Astroport governance officially migrates to Neutron, with new vxASTRO token mechanics launched.","source":"Neutron Medium","source_url":"https://medium.com/@Neutron.org/the-next-chapter-astroports-migration-to-neutron-7a5e2dbd4b37"},{"date":"2024-04-26","event":"Terraform Labs withdraws approximately $23.8 million in liquidity from platforms including Astroport in response to an SEC court ruling and expected conduct injunction.","source":"CryptoSlate","source_url":"https://cryptoslate.com/terraform-labs-to-restrict-us-access-withdraw-23-million-of-liquidity-following-sec-ruling/"},{"date":"2024-06-13","event":"Terraform Labs and Do Kwon agree to pay over $4.5 billion to settle the SEC's securities fraud case following a jury verdict.","source":"SEC.gov","source_url":"https://www.sec.gov/newsroom/press-releases/2024-73"},{"date":"2024-06","event":"Terra upgrades to an outdated ibc-go 7.3.x fork that accidentally reintroduces the April-patched reentrancy vulnerability.","source":"QuillAudits Hack Analysis","source_url":"https://www.quillaudits.com/blog/hack-analysis/astroport-hack","date_original":"2024-06-01"},{"date":"2024-07-30","event":"Attacker exploits the reintroduced IBC hook reentrancy vulnerability on Terra's Phoenix chain. Approximately $6.4 million in assets stolen (60M ASTRO, 3.5M USDC, 500K USDT, 2.7 BTC). Terra halts blockchain ~3.5 hours after detection. Astroport and Terra validators seize attacker ASTRO on Neutron and blacklist attacker Terra address. ASTRO token falls 56-60%.","source":"Rekt News / QuillAudits / CoinTelegraph","source_url":"https://rekt.news/astroport-rekt"},{"date":"2024-07-31","event":"Terra resumes operations after patching the IBC hook vulnerability. Astroport confirms attacker ASTRO on Neutron has been seized to Astroport Treasury.","source":"CryptoSlate / Astroport X","source_url":"https://cryptoslate.com/terra-resumes-operations-after-5m-security-breach-triggers-astroport-token-plunge/"}],"sources_used":[{"url":"https://rekt.news/astroport-rekt","name":"Astroport - Rekt","type":"news_article","archive_url":"http://web.archive.org/web/20260415161508/https://rekt.news/astroport-rekt","credibility":2,"archive_timestamp":"2026-04-15T16:15:08+00:00"},{"url":"https://www.quillaudits.com/blog/hack-analysis/astroport-hack","name":"Astroport Hack Analysis - QuillAudits","type":"research","archive_url":"http://web.archive.org/web/20260417052840/https://www.quillaudits.com/blog/hack-analysis/astroport-hack","credibility":2,"archive_timestamp":"2026-04-17T05:28:40+00:00"},{"url":"https://cointelegraph.com/news/terra-blockchain-halt-astro-token-drop","name":"Terra chain halts, ASTRO falls 60% - CoinTelegraph","type":"news_article","archive_url":"http://web.archive.org/web/20260819151721/https://cointelegraph.com/news/terra-blockchain-halt-astro-token-drop","credibility":1,"archive_timestamp":"2026-08-19T15:17:21+00:00"},{"url":"https://www.sec.gov/newsroom/press-releases/2024-73","name":"SEC: Terraform and Kwon to Pay $4.5 Billion","type":"regulatory","archive_url":"http://web.archive.org/web/20260611172021/https://www.sec.gov/newsroom/press-releases/2024-73","credibility":1,"archive_timestamp":"2026-06-11T17:20:21+00:00"},{"url":"https://docs.astroport.fi/docs/overview/security/audits","name":"Astroport Audits Documentation","type":"official","archive_url":"http://web.archive.org/web/20260725141029/https://docs.astroport.fi/docs/overview/security/audits","credibility":1,"archive_timestamp":"2026-07-25T14:10:29+00:00"},{"url":"https://www.halborn.com/audits/astroport-fi","name":"Halborn Astroport.fi Audit Reports","type":"research","archive_url":"http://web.archive.org/web/20251216235111/https://www.halborn.com/audits/astroport-fi","credibility":1,"archive_timestamp":"2025-12-16T23:51:11+00:00"},{"url":"https://github.com/oak-security/audit-reports/blob/master/Astroport/2022-01-20%20Audit%20Report%20-%20Astroport%20v1.0.pdf","name":"Oak Security Audit Reports - Astroport","type":"research","archive_url":"https://web.archive.org/web/20260819151942/https://github.com/oak-security/audit-reports/blob/master/Astroport/2022-01-20%20Audit%20Report%20-%20Astroport%20v1.0.pdf","credibility":1,"archive_timestamp":"2026-08-19T15:19:42+00:00"},{"url":"https://blog.astroport.fi/post/astro-re-port-7-astroport-to-migrate-governance-and-staking-to-neutron-and-launch-vxastro-all-time-volume-records-pcl-deployments-and-more","name":"Astroport migration to Neutron - official blog","type":"official","archive_url":null,"credibility":1,"archive_error":"error:not-found","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://medium.com/@Neutron.org/the-next-chapter-astroports-migration-to-neutron-7a5e2dbd4b37","name":"Neutron Migration Medium post","type":"news_article","archive_url":null,"credibility":2,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://blog.astroport.fi/post/astroport-contributors-establish-foundation-to-power-new-protocol-development","name":"Astroport Foundation established - official blog","type":"official","archive_url":null,"credibility":1,"archive_error":"error:invalid-host-resolution","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://cryptoslate.com/terraform-labs-to-restrict-us-access-withdraw-23-million-of-liquidity-following-sec-ruling/","name":"Terraform Labs to restrict US access and withdraw liquidity - CryptoSlate","type":"news_article","archive_url":"https://web.archive.org/web/20260819151809/https://cryptoslate.com/terraform-labs-to-restrict-us-access-withdraw-23-million-of-liquidity-following-sec-ruling/","credibility":2,"archive_timestamp":"2026-08-19T15:18:09+00:00"},{"url":"https://cryptoslate.com/terra-resumes-operations-after-5m-security-breach-triggers-astroport-token-plunge/","name":"Terra resumes after $5M breach - CryptoSlate","type":"news_article","archive_url":"http://web.archive.org/web/20251212031231/https://cryptoslate.com/terra-resumes-operations-after-5m-security-breach-triggers-astroport-token-plunge/","credibility":2,"archive_timestamp":"2025-12-12T03:12:31+00:00"},{"url":"https://medium.com/coinmonks/d%C3%A9j%C3%A0-vu-how-a-previously-patched-vulnerability-led-to-astroports-6-4m-exploit-6674e86cae88","name":"Deja Vu: Previously Patched Vulnerability - Coinmonks","type":"research","archive_url":null,"credibility":2,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://coin-signal.com/cryptonews/a-fake-astroport-defi-application-has-appeared-in-the-terra-ecosystem/","name":"Fake Astroport app in Terra ecosystem - Coin-Signal","type":"news_article","archive_url":null,"credibility":3,"archive_error":"error:not-found","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.coingecko.com/en/coins/astroport-fi","name":"Astroport price today - CoinGecko","type":"other","archive_url":null,"credibility":2,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://blog.astroport.fi/post/astro-airdrop-update-and-resolution","name":"ASTRO airdrop update and resolution - Astroport Blog","type":"official","archive_url":null,"credibility":1,"archive_error":"error:not-found","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://astroport.medium.com/astroport-terra-2-0-a-new-path-forward-b7b328171e4b","name":"Astroport + Terra 2.0 - Astroport Medium","type":"official","archive_url":"http://web.archive.org/web/20260725133634/https://astroport.medium.com/astroport-terra-2-0-a-new-path-forward-b7b328171e4b","credibility":1,"archive_timestamp":"2026-07-25T13:36:34+00:00"},{"url":"https://forum.neutron.org/t/approved-proposal-13-establish-strategic-collaboration-with-astroport-via-mutual-token-grants/182","name":"Neutron Strategic Collaboration Proposal #13","type":"official","archive_url":"https://web.archive.org/web/20260819151922/https://x.com/neutron_org/status/2072037746424603130","credibility":1,"archive_timestamp":"2026-08-19T15:19:22+00:00"}],"source_tags":[],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-sonnet-4-6","created_at":"2026-06-01T17:46:54.197576+00:00","updated_at":"2026-08-25T13:28:49.442548+00:00"}}